§ 1 General Provisions
- The administrator of personal data collected via the online store Koi Metal Merch is Jakub Kulikowski KOI NIP: 6762691856.
 - For matters regarding data protection, you can contact us via email at: koimetalmerch@gmail.com
 - All personal data is processed in accordance with applicable legal provisions, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
 
§ 2 Scope of Collected Data
- The Administrator processes the following personal data:
- First name and last name,
 - Email address,
 - IP address.
 
 - Data is collected when:
- Placing an order,
 - Subscribing to the newsletter,
 - Using the website (cookies).
 
 
§ 3 Purposes of Data Processing
Personal data is processed for the following purposes:
- Order fulfillment – based on the sales agreement.
 - Marketing and sending newsletters – based on the customer’s consent.
 - Contacting customers regarding orders or inquiries.
 - Statistics – to analyze website traffic and better tailor content to user needs.
 
§ 4 Legal Basis for Data Processing
Personal data is processed on the following legal bases:
- Sales agreement – processing of personal data necessary to fulfill an order.
 - Customer consent – for data processing for marketing purposes, including sending newsletters.
 
§ 5 Data Recipients
Personal data may be transferred to the following entities:
- Courier companies – for the delivery of orders.
 - Payment platforms – to process payments for orders.
 - IT service providers – to ensure the technical operation of the online store.
 
§ 6 Data Retention Period
Personal data will be stored for the period necessary to achieve the purposes for which it was collected, i.e.:
- Until the user withdraws consent for data processing for marketing purposes.
 - Until the end of cooperation with the entity under the sales agreement.
 
§ 7 User Rights
Every user has the right to:
- Access their personal data.
 - Correct their data.
 - Delete their data (the right to be forgotten).
 - Restrict the processing of their data.
 - Transfer their data to another administrator.
 - Object to the processing of their data.
 - File a complaint with the President of the Personal Data Protection Office (PUODO).
 
§ 8 Data Transfers Outside the EEA
The Administrator does not transfer personal data outside the European Economic Area (EEA).
§ 9 Cookies
The online store uses cookies for the following purposes:
- Ensuring proper functioning of the store – cookies enable the correct functioning of the store and order fulfillment.
 - Customizing website content to user preferences – cookies allow the personalization of displayed content according to user preferences.
 - Traffic analysis and statistics – cookies are used to collect anonymous statistical data, allowing for the optimization of the store.
 - Marketing and advertising – cookies may be used to display personalized ads and marketing activities.
 
§ 10 Data Security
The Administrator applies appropriate technical and organizational measures to protect users’ personal data, including:
- Data encryption during online transmission.
 - Securing server infrastructure.
 - Security protocols ensuring protection against unauthorized access.
 
§ 11 Changes to the Privacy Policy
In the event of changes to the Privacy Policy, users will be informed:
- By email.
 - Through an announcement on the store’s website.
 
§ 12 Contact
For matters related to personal data protection, please contact us by email at: koimetalmerch@gmail.com